shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

shellshock-cgi

shellshock-cgi 一个用于枚举特定服务器上易受CVE-2014-6271漏洞影响的CGI脚本的Python脚本 用法 root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 示例返回： root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connections on the following socket...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link 远程代码执行（RCE）漏洞利用 描述 本仓库包含针对 CVE-2024-3273 的漏洞利用代码，这是特定 D-Link 设备中发现的一个严重漏洞，可实现远程代码执行（RCE）。该漏洞源于 nassharing.cgi CGI 脚本中不当的输入验证，使攻击者能够在未经身份验证的情况下执行任意命令。 影响 利用 CVE-2024-3273 可对受影响设备进行非授权访问，允许攻击者： 篡改系统配置 访问敏感数据 部署恶意代码 受影响产品 该漏洞主要影响各种 D-Link NAS 设备，以及可能使用易受攻击的 CGI 脚本的其他产品。 使用方法...

PoC-CVE-2021-41773

CVE-2021-41773 PoC Proof of concept to check if hosts are vulnerable to CVE-2021-41773. Description https://vulners.com/cve/CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49-2.4.50. An attacker could use a path traversal attack to map URLs to file...

shocknaww

shocknaww Script simple para comprobar CVE-2014-6271 Ejemplo de uso root@kitploit: ./shocknaww.py http://foo.bar/cgi-bin/foo Entorno vulnerable de ejemplo Desde el directorio padre, ejecuta lo siguiente. root@kitploit: python -m CGIHTTPServer Ahora usa shocknaww contra tu servidor de prueba...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE 描述 : 本仓库包含 CVE-2025-54769 的概念验证 PoC 利用代码，该漏洞存在于 lpar2rrd 中。 此漏洞通过滥用 /lpar2rrd-cgi/upgrade.sh 接口，可实现远程代码执行（RCE）和目录遍历。漏洞利用流程如下： 脚本生成 : 自动创建一个恶意 Perl CGI 载荷（users.pl），该载荷可执行任意 shell 命令（默认：whoami）。 载荷上传 : 使用 libcurl 将生成的脚本作为“升级包” POST 到易受攻击的接口，绕过基本的文件验证。 目录遍历 :...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco 漏洞: CSCur90888 漏洞利用标题 : Cisco UCS Manager - 2.21d - 远程命令执行 描述 : 运行于 Firepower 9000 设备上的 Cisco FX-OS（1.1.2 之前版本）和 Cisco Unified Computing System UCS Manager（2.24b 之前版本、2.25 至 2.25a 之前版本、3.0 至 3.02e 之前版本）中存在一个未指定的 CGI 脚本，远程攻击者可通过精心构造的 HTTP...

CVE-2026-82971

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

EUVD-2026-68468

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

PT-2026-84054

Name of the Vulnerable Software and Affected Versions QVidium Opera11 version 3.3.2a26-Ax4x-opera11 Description An unauthenticated command injection issue exists in the CGI Script component. A remote attacker can exploit this by manipulating the ipaddr argument within the '/cgi-bin/net tr.cgi'...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

CVE-2026-19971

A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this...

CVE-2026-9476

A vulnerability was identified in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be...

CVE-2026-9533

Technical details about CVE-2026-9533 are not publicly provided in the supplied documents; no affected firmware versions, root cause specifics, or mitigations are listed here. Monitor for updates.

CVE-2026-9475

Totolink A8000RU Web Management interface vulnerable in /cgi-bin/cstecgi.cgi (function setIpQosRules). CVE-2026-9475 affects Totolink A8000RU 7.1cu.643_b20200521; manipulating the Comment argument enables OS command injection. Remote exploitation is possible; exploit publicly disclosed. According...

EUVD-2026-31643

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Performing a manipulation of the argument enable results in os command injection. Remote exploitation of...

CVE-2018-25358 D-Link DIR601 2.02NA Credential Disclosure via my_cgi.cgi

D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the tablename parameter in POST requests. Attackers can send requests to /mycgi.cgi with tablename values like adminuser,...

CVE-2026-8227

CVE-2026-8227 affects Wavlink NU516U1 240425. The vulnerability is in the function wzdapMesh of the file /cgi-bin/adm.cgi, enabling an OS command injection. It may be exploited remotely, with exploits publicly available. Multiple sources (NVD, Red Hat, EUVD/ENISA, CIRCL, CVE records) corroborate ...